PH19978: CICS TS 5.5 SUPPRESSAUTHFAILUREMESSAGES TO BE SET TO FALSE FOR THE CMCI JVM SERVER

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• You are running with the CICS WUI server, using a Generic VTAM
  applid and you are using pass tickets without issue.  When you
  switch out the WUI server to use a JVM Server instead, CMCI
  requests using a pass ticket start failing.  The failure itself
  is not so much the issue, as is the lack of messaging to direct
  you to the underlying problem.
  
  In the server.xml configuration, the
  suppressAuthFailureMessages attribute controls whether these
  messages are propogated to the log.  When you change this
  setting to 'false', you are able to see the RACF violation
  messages in the job log.  Since the JVMServer profile will
  eventually be used by multiple CMCI servers, you would prefer
  that suppressAuthFailureMessages be set to 'false' for the CMCI
  JVM server.
  
  
  Additional Symptom(s) Search Keyword(s): KIXREVHJN
  

Local fix

• Manually set the suppressAuthFailureMessages attribute to
  'false' in the server.xml.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS Users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: CMCI requests to the EYUCMCIJ WUI fail  *
  *                      with a user authentication error but    *
  *                      there are no messages on the CICS log   *
  *                      to indicate this.                       *
  ****************************************************************
  CMCI requests fail with a user authentication error, but because
  of the server.xml configuration the propagation of any useful
  messages to the CICS log are suppressed. This makes
  investigation of the failure more difficult than it needs to be.
  
  Additional Keywords: CWWKS2932I CWWKS2907E CWWKS1100A
  

Problem conclusion

• The CMCI JVM server has been changed so that the
  suppressAuthFailureMessages property is set to false.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI68367 UI68368

Modules/Macros

• DFJ@H350
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R10D PSY UI68368

     UP20/03/13 P F003

• R200 PSY UI68367

     UP20/03/13 P F003

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.